youtu.be

58008, do games w Who would win Kernel level anti-cheat or middle age man with a Raspberry Pi?
@58008@lemmy.world avatar

That’s awesome 🤣 definitely PED-like cheating though.

ramble81, do games w Any Xbox 360 can now be hacked in less than one minute

Got everything ready to try. Just need to pull out my 360. Would I use it long term? Probably not, but this is too cool of a test to pass up.

Cort,

Pulled my 360 out of storage a couple years ago and it instantly red ringed when I tried to power on. Hopefully you have better luck

moseschrute, do games w Who would win Kernel level anti-cheat or middle age man with a Raspberry Pi?

This is like a Michael reeves level masterpiece

banause, do games w Any Xbox 360 can now be hacked in less than one minute

I have one at home and it’s still not hacked.

Spuddlesv2,

I’ve got three. All RROD’d.

viral.vegabond,

Learn your lesson yet? Lol

ampersandrew, do games w Who would win Kernel level anti-cheat or middle age man with a Raspberry Pi?
@ampersandrew@lemmy.world avatar

I imagine there would still be tons of cheaters even if it caused them physical pain every time they cheated, lol. What a great, brilliant, stupid idea for a video that masterfully weaved in his sponsor.

Aielman15, do games w Any Xbox 360 can now be hacked in less than one minute
@Aielman15@lemmy.world avatar

Tangentially related: how do I make YT thumbnails (or any thumbnail, for that matter) show on Lemmy posts?

any1th3r3,

The thumbnail shows up just fine on Voyager FWIW.

Aielman15,
@Aielman15@lemmy.world avatar

Uh. I never see thumbnails on my posts on either my app (Lemmy) or pc (either the standard lemmy site or Alexandrite). Maybe Voyager has a built-in functionality that allows it to fetch the thumbnails frok YT when they are missing in the post itself?

leavemealone,

Same on Boost

drspod,

You can get the URL of the thumbnail from the youtube page and then enter that URL in the “thumbnail URL” text-box when creating/editing your post.

PixelatedSaturn, do games w Who would win Kernel level anti-cheat or middle age man with a Raspberry Pi?

Just awesome!

Blxter, do games w Who would win Kernel level anti-cheat or middle age man with a Raspberry Pi?
!deleted4407 avatar

Love his videos

Coelacanth, do games w Who would win Kernel level anti-cheat or middle age man with a Raspberry Pi?
@Coelacanth@feddit.nu avatar

Basically Homeless is an absolute treasure. The gas powered PC (and followup) are a personal favourite but all his build videos and his Stupid Setups are absolute gold. Using a printer as a monitor was another highlight.

yermaw, do games w Who would win Kernel level anti-cheat or middle age man with a Raspberry Pi?

Heavy training. Feeling the burn

Truscape, do games w Any Xbox 360 can now be hacked in less than one minute

MVG finally lands on lemmy, let’s go!

daggermoon,

I like his videos a lot.

prole, do games w Battlefield 6 cheats day 1 of early access. Depite kernel level anti cheat, forced secure boot TPM 2.0

Why are people like this. How does this make gaming enjoyable?

Passerby6497,

Honestly, if I had the skills I’d be doing that as an explicit fuck you to the draconian anticheat bullshit they force on everyone, because what better fuck you than showing all that effort was for naught, especially close to launch.

EA can go fuck themselves with the world’s biggest cactus.

thespcicifcocean,

I prefer “fuck you with an anchor”

m.youtube.com/watch?v=th4Czv1j3F8

Passerby6497,

I love that track, but have to skip it regularly with my kid in the car lol

Rolive,

There’s a kid friendly version. Flipped with a sausage.

And one for dogs as well.

Passerby6497,

I have ‘for dogs’ on my radio already, but I might put the sausage one on too, that’s great

lorty,
@lorty@lemmy.ml avatar

A lot of hacking in valorant is about this tbf (and to more efficiently sell boosts)

tiramichu, (edited )

For some people the only things that brings them joy are 1) winning 2) making other people suffer

RepleteLocum,

Or developing cheats. It sounds really fun and you get to grow by keeping on top of the anticheat.

ILikeBoobies,

It’s fun to cheat in games, that’s why we have cheat codes.

Also there’s the competitive side of it where not getting caught is a skill and glitching is just game knowledge.

slaneesh_is_right,

Cheat codes and cheating in online games is obviously the same thing. You cheat because you’re a cunt.

ILikeBoobies,

I don’t cheat, I play online games to get into flame wars not to play the games.

lorty, do games w Battlefield 6 cheats day 1 of early access. Depite kernel level anti cheat, forced secure boot TPM 2.0
@lorty@lemmy.ml avatar

Your anti-cheat doesn’t work anyway so let me play in linux you cowards.

slaneesh_is_right,

They want to keep windows relevant so hard. Yeah, i enable secure boot, and let some kernel level anti cheat into my system. At least i don’t have to play with cheaters. Oh there are still cheaters. So glad

brezel, do games w Battlefield 6 cheats day 1 of early access. Depite kernel level anti cheat, forced secure boot TPM 2.0

beautiful. fuck secureboot.

9tr6gyp3,

Why?

Kyrgizion,

Needlessly intrusive. Can obviously be circumvented by cheaters anyway, so quite possibly superfluous. Apart from that it protects against the kinds of attacks that typically require physical access to the computer. If you have physical access you have full access anyway. Etc.

9tr6gyp3,

If you have physical access you have full access anyway. Etc.

You know secure boot was specifically made to protect users for this exact use case. Any tampering of the system will prevent the system from booting.

Eggymatrix,

I get your pc, “tamper” it, then i install a fake bios that tells you all is well and that your tpm and secureboot and whatever else bullcrap they invent is still happy.

See the problem?

Corngood,

It won’t boot though, because the keys to decrypt the system are stored in the TPM.

Sure you could replace the whole OS, but that’s going to be very obvious and won’t allow you access to the data.

atticus88th,

Isnt it possible to have a recovery key? Isnt that technically a backdoor? Maybe the terms are not correct but there is a way in physically.

jjjalljs,

If you have physical access you could go into the bios and turn off secure boot

PHLAK,
@PHLAK@lemmy.world avatar

If you enable Secure Boot you should also set a BIOS password for this very reason.

jjjalljs,

I think you can reset a bios password by taking the CMOS battery out or something?

AlphaOmega,

Not sure if this works these days, but on older systems there was a reset bios config jumper and pulling the cmos battery.

Saleh,

So, if you set a bios password either way, which benefit does secureboot give?

Miaou,

Can’t access the bios with secure boot on (at least I could not on an old laptop I was refurbishing, thank god the owner could login into windows)

jjjalljs,

That’s unusual, I think. Every computer I’ve had that had it on, I was able to turn it off when I went to install Linux.

Limonene,

A person with physical access can tamper with the OS, then tamper with the signing keys. Most secure boot systems allow you to install keys.

Secure boot can’t detect a USB keylogger. Nothing can.

9tr6gyp3,

The signature checks will immediately fail if ANY tampering has occurred.

Adding a USB keylogger that has not been signed will cause a signature verification failure during boot.

Limonene,

A USB keylogger is not detectable by the computer, not in firmware nor operating system. It passively sniffs the traffic between the USB keyboard and the computer, to be dumped out later.

9tr6gyp3,

If your keys are stored in the TPM for use during the secure boot phase, there will be nothing for it to log.

Tanoh,

If you have physical access you have full access anyway

No, encrypt your drives.

SoupBrick,

It fucks with Linux. I literally just disabled it to resolve a driver install issue before this announcement was made.

9tr6gyp3,

Linux can run with secure boot just fine though. Use your distros documentation to set it up.

troed,
@troed@fedia.io avatar

Secureboot doesn't "fuck with Linux". It does protect you from malware trying to install unsigned kernel modules.

Apparently that driver is unsigned, which is not the normal case nowadays.

SoupBrick,

Good to know, thanks

I was trying to install an Nvidia driver on Linux Mint, so I think I am safe.

SkavarSharraddas,

Is that a realistic attack scenario that end users need to be concerned about?

troed,
@troed@fedia.io avatar

Yes. That's how you get undetectable rootkits.

Oisteink,

This happens to roughly 1/3rd of all pc’s. But if you put secureboot ON and the FBI cant touch your pc

frongt,

This type of attack has been seen in the wild for quite some time. Ultimately it’s a security vs convenience decision.

brezel,
  • some people run more than 1 OS
  • some people actually program and need to load unsigned shit all the time
  • some people have legacy hardware that doesn't run with secureboot
  • it is my decision and my decision alone how i boot my operating systems. not EA's.
9tr6gyp3,

Im fairly certain any legacy hardware that doesn’t have secure boot as an option is going to struggle loading BF6 regardless.

The first two points are not related to secure boot at all.

brezel,

you think loading my own kernel modules is not related to secure boot? i guess you don't work in IT then.

9tr6gyp3,

It doesn’t matter which kernel modules are used, as long as you have signed those changes before rebooting.

Miaou,

Most people who work IT don’t even know what a kernel is, tbf

tpyo,

I recently had an rfid scanner immediately rma-d back that had just been returned to us. The new issue was caused by a setting and not by a defect. I asked our IT/help desk if it WAS a setting that could be changed

“I don’t know. I get the thing, I check these settings, I check those settings, that’s all I know”

😑😑😑

So me and another person are out of our equipment for another couple weeks while the scanner is sent back for “repairs” and the repair people will go “😑 tap tap tap idiots”

(Edit: I know it’s a setting because I talked with the other person who uses it and I explained the issue and he let me know it is something he changes)

pathief,
@pathief@lemmy.world avatar

You can’t install most linux distributions with secure boot enabled.

troed,
@troed@fedia.io avatar

Really? Which would those be? So far I haven't come upon one.

null,
@null@lemmy.nullspace.lol avatar

most Linux distributions

troed,
@troed@fedia.io avatar

Yeah that simply isn't true. I use Secure Boot on all my Linux installs - both in the deb and rpm ecosystem system.

null,
@null@lemmy.nullspace.lol avatar

Sorry, I read it backwards – we agree, most Linux distributions do support Secure Boot

muusemuuse,
@muusemuuse@sh.itjust.works avatar

This is outdated information. Linux has supported secure boot for quite a while now.

_cryptagion,
@_cryptagion@quokk.au avatar

And Microsoft is shutting out most third parties in the near future because of Crowdstrike, so Linux likely won't be supporting Secure Boot in the future, even if someone did want to enable it for some odd reason.

cole,
@cole@lemdro.id avatar

Microsoft can’t stop you from signing images with your own keys.

That’s what I do, and it’s almost entirely automated on Linux these days.

muusemuuse,
@muusemuuse@sh.itjust.works avatar

Microsoft’s kicking third parties out of the kernel because of crowdstrike. Secure boot is a completely different thing Microsoft can’t kick people out of.

Resonosity,

Do you have any advice for someone that dual boots SteamOS and Windows 10 on a Steam Deck?

I’ve heard online that since SteamOS manually signs keys or something, that if any changes happen to the kernel that later need to be updated by SteamOS, I’d need to re-sign the keys or whatever. Idk I’m not well versed in any of this

I’ve heard it’s as easy as downloading the M$ keys to enable Secure Boot, but I also don’t want to brick my Deck.

muusemuuse,
@muusemuuse@sh.itjust.works avatar

Windows 10 support is ending soon so there’s no reason to have it on your steam deck. Steam will stop supporting it sooner after Microsoft does, just like steam does with Apples operating system.

Resonosity,

Windows 10 commercial is ending, not the LTSC versions. Those are good for another 2-7 years iirc

muusemuuse,
@muusemuuse@sh.itjust.works avatar

No, they are killing it unless you pay and extra $30 a month and use a Microsoft account and kill local accounts.

Resonosity,

Source?

muusemuuse,
@muusemuuse@sh.itjust.works avatar
Resonosity,

That’s for commercial releases of Windows 10 dumbass. There are two other enterprise releases that will have free security updates for 2-7 more years.

muusemuuse,
@muusemuuse@sh.itjust.works avatar

Which is again proving my point. Steam is selling games to people with enterprise licenses.

Resonosity,

You never made that point. Stop moving the goal posts.

Do we have any evidence that Steam will not supported anything Windows 10 related, given that commercial licenses are ending and many people are shifting to enterprise licenses?

And it’s not like Steam hasn’t already been doing this. People have used enterprise licenses for legit and nefarious purposes for years. I doubt they’d change anything in October. They aren’t owned by M$

muusemuuse,
@muusemuuse@sh.itjust.works avatar
  1. You can run more than one OS with secure boot enabled. It’s just a pain in the ass.
  2. you can run unsigned code on a secure boot enabled system.
  3. its 2025, what the fuck do you have that can’t secure boot by now?
  4. THIS is your winning argument.
Truscape,

(1) Yeah, well the secure boot keys needed for Linux distributions expire in September (tomshardware.com/…/microsoft-signing-key-required…), so that seems like a sustainable solution, sure buddy. (3) What’s your income? What region of the world do you live in and what hardware is available to you? I’m still using an am4 platform PC as my daily driver because I can’t burn money. One of my buddies has an AM3 PC. Many people use modified surplus office PCs (especially in developing nations like South America or SEA), which don’t have secure boot as an option. Check your privilege, and maybe donate some of your spare hardware to those who need it, if you want to make this “a non issue” for everyone. (4) Yeah. I own my hardware, I configure my software. I gut Windows like a fish and keep it on a leash for these games, and use Linux for my work and for the games that respect the ecosystem.

muusemuuse,
@muusemuuse@sh.itjust.works avatar
  1. New keys have already been released and you can always just create and enroll your own damn keys. This is sensationalist nonsense.
  2. “Check my privilege” over secure boot? Calm down, Karen.
  3. I think gaming on PC is going to get interesting in the coming decade as Microsoft kicks third parties out of the kernel (thanks crowdstrike!) and more and more people just stop putting up with windows. Enterprise in the US is hooked but everyone else? Na, they are gonna drop it.

Edit: these are listed as 1,3,and 4 in my post in voyager but lemmy shows 123. Interesting.

Truscape,

On the list thing, it seems that adding numbers with periods in a list seems to auto configure it to ascending numbers. That’s why I used (1) (3) (4). Weird, but I guess that’s the work around.

Enrolling your keys doesn’t work btw, because battlefield checks which keys you enroll, only accepting the default MS keys. Also on the hardware front, it is a big problem for gamers on a sub-300 USD budget these days - the best deals are on legacy hardware or surplus office equipment, mainly AM3-AM4 era.

filcuk,

The number list is how markdown works. You can enter all 1’s and it will automatically create ordered list.
Handy when you may need to edit list items, as you dont need to renumber even in plain text.
Markdown spec should allow for explicit number by using a bracket ‘)’ instead of a dot, but it may not work everywhere.
Let’s give it a go


<span style="color:#323232;">3) start from 3  
</span><span style="color:#323232;">1. Then  
</span><span style="color:#323232;">1. Continue  
</span>
  1. start from 3

  2. Then

  3. Continue

filcuk,

Hmm not quite what that should look like

Alaik,

I don’t think he needs a winning argument. I think EA needs to justify this kernel level AC, not the other way around.

muusemuuse,
@muusemuuse@sh.itjust.works avatar

I’m agreeing with point 4.

Kazumara,

You can run more than one OS with secure boot enabled. It’s just a pain in the ass.

Weird, for me it was just flicking the switch in UEFI and now Grub and trough it Windows 10 and Fedora 43 boot in Secure Boot.

Jaded99, do games w Battlefield 6 cheats day 1 of early access. Depite kernel level anti cheat, forced secure boot TPM 2.0

Only AI will be able to root this out in future

massi1008,

That’s an (obviously) unpopular opinion around here but I’ll give you the benefit of the doubt: How would AI be able to do that?

bluesheep,

Don’t waste your time, they’re either an hardcore AI bootlicker or a shit stirrer - most likely both, looking at their post history.

pineapplelover,

CSGO used to have Overwatch which is an anti cheat system that uses trusted and experienced players to go through video footage of reported players. With this method I both reported blatant spinbotters, wall hacking, and other chears. I also was on the side of watching back footage of hacking players.

Say AI trains on this data, it might work.

I’m not a fan of this though because knowledgeable and experienced players will be better than AI.

sunred,
@sunred@discuss.tchncs.de avatar

What actually exists but what I have yet to see implemented in any game I play are those server-side “AI anti-cheat” solutions like from anybrain that basically just analyse the players behavior to fit certain criteria. According to areweanticheatyet.com though there are four games using it already (the most well-known one probably being Lost Ark). In theory ai models can be very efficient and accurate at this (we are not talking about transformer models here like with the current llm craze) but that all depends on how they train a model and what the training data looks like.

Stovetop,

I am not sure what the user above is thinking, but to play devil’s advocate:

One thing that modern AI does well is pattern recognition. An AI trained on player behavior, from beginner level all the way up to professional play, would be able to acquire a thorough understanding of what human performance looks like (which is something that games have been developing for a long time now, to try to have bots more accurately simulate player behavior).

I remember someone setting up their own litmus test using cheats in Tarkov where their main goal was just to observe the patterns of other players who are cheating. There are a lot of tells, a big one being reacting to other players who are obscured by walls. Another one could be the way in which aimbots immediately snap and lock on to headshots.

It could be possible to implement a system designed to flag players whose behavior is seen as too unlike normal humans, maybe cross-referencing with other metadata (account age/region/sudden performance anomalies/etc) to make a more educated determination about whether or not someone is likely cheating, without having to go into kernel-level spying or other privacy-invasive methods.

But then…this method runs the risk of eventually being outmatched by the model facilitating it: an AI trained on professional human behavior that can accurately simulate human input and behave like a high performing player, without requiring the same tools a human needs to cheat.

zqps,

Cheating humans already perform closely enough to trick such a system. Many cheaters are smart enough to use an aimbot only for a split-second to nail the flick. With a tiny bit of random offset, those inputs indistinguishable from a high-skill player.

ChairmanMeow,
@ChairmanMeow@programming.dev avatar

These tricks may make it indistinguishable to a human moderator, but machine learning is actually really good at detecting that. But most companies don’t have the expertise, resources or training data to build a proper model for it.

NuXCOM_90Percent,

Machine Learning is really good at CLAIMING it detected that.

The reality is that every few months there is a story about a fairly big streamer/e-sports player MAYBE getting caught cheating on stream. Sometimes it is obvious and sometimes it really becomes “Did they just know the map well enough to expect someone to come around that corner?”.

And a lot of times… it really is inconclusive. A somewhat common trope in movies is the veteran gunslinger literally aims at the wall of a stairwell and tracks where they expect the head to be and either fires a few rounds through the wall or waits for them at the bottom and… that is not entirely inconceivable considering that people tend to not crouch or move erratically down stairs. Obviously Jonathan Banks has a wallhack but Mike Ehrmantraut is just that damned good.

And false positives are a great way to basically kill a game. ESPECIALLY if they are associated with demonstrably false negatives too.

But you can be damned sure most of the major esports games are already doing this. It really isn’t expensive to train and they have direct feeds of every player in a tournament or twitch event. The issue is that there are (hopefully) tens of thousands of servers active at any moment and running Computer Vision+Inference on every single server is very costly.

And… I seem to recall there was a recent intentionally poorly defined Movement about maybe keeping user hostable dedicated servers a thing? How does that mesh with having every single server need to phone hom (a fraction of) all 32 players feeds to a centralized cluster?

ChairmanMeow,
@ChairmanMeow@programming.dev avatar

Machine learning doesn’t necessarily require a centralized cluster. Usually running those kinds of models is pretty cheap, it’s not an LLM basically. They usually do better than human moderators as well, able to pick up on very minute ‘tells’ these cheats have.

I understand your point about edge cases, but that’s not something the average player cares about much. E-sports is a pretty niche part of any game, especially the higher ranks. You just want to filter out the hackers shooting everyone each game that truly ruin the enjoyment. Someone cheating to rank gold instead of silver or whatever isn’t ruining game experiences; they’re usually detectable too, but if you get a false negative on that it’s not the end of the world. A smurf account of a very highly ranked player probably has a bigger impact on players’ enjoyment.

NuXCOM_90Percent,

Depending on the model, inference can be run with CPU only. To distinguish what was originally proposed (a momentary flick consistent with aimbotting), you are either doing ray tracing (really expensive) or analyzing (effectively) video feeds. Both of which tend to put things more into the GPU realm which drastically increases the cost of a server.

But also? The only way these models can work is with constant data. Which means piping feeds back home for training which basically is never inexpensive.

Aside from that: if it was as simple as you are suggesting then this would be a solved problem. Similarly, if people don’t care about hackers outside of e-sports then there would be no reason for games to spend money on anti-cheat solutions when any match that matters would have heavy scrutiny. And yet, studios keep pumping out the cash for EAC and the like.

Jaded99,

The same way it’s automodderating Reddit to a point that nobody can post anything anymore LOL

Jaded99,

Since human beings are hot garbage and will always cheat, I really enjoyed playing against the AI soldiers in BF. It can also ensure that the game is playable forever OFFLINE.

Where I live I cant play BF4 anymore. Servers are down for my country, but I paid money for the game. Digital media is a scam once the servers go down. That is why I jailbroke every console I own. Ppl are already reviving BF2 with AI bots. The future is looking bright.

Furbag,

Keep that AI horseshit out of video games, thanks.

MonkderVierte,

Pattern recognition anticheat vs. bot based on patterns? I don’t see anyone winning.

  • Wszystkie
  • Subskrybowane
  • Moderowane
  • Ulubione
  • test1
  • esport
  • rowery
  • informasi
  • ERP
  • tech
  • healthcare
  • Technologia
  • Gaming
  • FromSilesiaToPolesia
  • krakow
  • fediversum
  • muzyka
  • turystyka
  • NomadOffgrid
  • Psychologia
  • Cyfryzacja
  • Blogi
  • shophiajons
  • retro
  • Travel
  • Spoleczenstwo
  • gurgaonproperty
  • slask
  • nauka
  • sport
  • warnersteve
  • Radiant
  • Wszystkie magazyny